bumbag-addon-highlighted-code - npm Package Compare versions

Comparing version 2.7.1 to 2.7.11

package.json

 {
   "name": "bumbag-addon-highlighted-code",
-  "version": "2.7.1",
+  "version": "2.7.11",
   "description": "An accessible, composable, and friendly React UI Kit",
@@ -35,3 +35,3 @@ "main": "lib/index.js",
     "@testing-library/react-hooks": "1.1.0",
-    "bumbag": "^2.7.1",
+    "bumbag": "^2.7.11",
     "react-test-renderer": "16.8.6"
@@ -49,3 +49,3 @@ },
   ],
-  "gitHead": "4a64901e30baab7d31e7e79a2848285c59191787"
+  "gitHead": "9b1e5dd27c30a1f29db477a7d891bdd2fdf97663"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

4626799

decreased by-2.09%

Lines of code

23287

decreased by-1.61%

No dependency changes